Security Directory

Church & Dwight Co., Inc. is a well-established enterprise in the consumer goods sector, specializing in home and personal care products. The company operates globally with a portfolio of recognized brands, targeting consumers and investors interested in quality household and health products. The website reflects a professional corporate presence with clear branding and navigation, supporting business functions such as careers, innovation, and investor relations. Technically, the site employs modern frameworks like Bootstrap and integrates analytics and cookie consent tools, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforcement, domain locking, and cookie consent mechanisms, though there is room for improvement by enabling DNSSEC and publishing a security.txt file. Overall, the website is trustworthy, compliant with privacy regulations, and provides a positive user experience.

M

MAS Brána Brněnska, z.s.

branabrnenska.cz

60

MAS Brána Brněnska, z.s. is a regional non-profit organization focused on rural development and facilitating EU and national funding for the Brněnsko region in the Czech Republic. The organization collaborates with citizens, non-profits, private sector, and public administration to improve quality of life and environment in rural areas. Their website provides information about their projects, funding opportunities, and community news, positioning them as a key regional development actor. Technically, the website uses a custom CMS platform provided by Obce na webu s.r.o., leveraging common web technologies such as Bootstrap, jQuery, and Google Analytics. The site is mobile-optimized with a moderate performance profile and basic accessibility features. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and published security policies. Overall, the website is professional, trustworthy, and serves its target audience effectively.

T

Tops México

topsmejoresempresasdeconstruccionyvivienda.com

44

Tops México operates a specialized website focused on ranking and showcasing the top 200 brands and companies in the construction and housing sector in Mexico. The platform serves industry professionals and stakeholders by providing market research-based rankings, news, and blog content. The website is built on WordPress using Elementor and integrates SEO and analytics tools to enhance visibility and user engagement. The business is positioned as an important information source within the Mexican construction industry, founded in 2021, and maintains a consistent brand presence across multiple social media channels. Technically, the site demonstrates moderate performance and good mobile optimization but lacks advanced security headers and DNSSEC implementation. Privacy compliance is addressed with a comprehensive privacy policy, though cookie consent mechanisms are absent. Overall, the site is trustworthy, professional, and well-aligned with its business objectives.

G

Grafana Labs

grafana.com

79

Grafana Labs is a leading technology company specializing in open source analytics and monitoring solutions, primarily targeting developers, IT professionals, and enterprises seeking comprehensive observability platforms. The company offers a robust suite of products including Grafana Cloud and open source tools such as Grafana, Loki, and Tempo, enhanced with AI/ML capabilities for anomaly detection and root cause analysis. Recognized as a leader in the 2025 Gartner Magic Quadrant for Observability Platforms, Grafana Labs maintains a strong market position with a focus on cloud-based and enterprise solutions. Technically, the website is built using modern technologies including the Hugo static site generator, Alpine.js for interactivity, and Tailwind CSS for styling, hosted on Amazon AWS infrastructure. The site demonstrates excellent performance, mobile optimization, and accessibility, supported by comprehensive SEO practices. Privacy compliance is well addressed with a detailed privacy policy, cookie consent mechanisms via OneTrust, and GDPR adherence indicators. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes essential security headers. While no explicit security policy or incident response contacts are published, the domain registration data is consistent and trustworthy, with clientTransferProhibited status and no privacy protection masking registrant details. Minor improvements could include enabling DNSSEC and publishing a security.txt file to enhance vulnerability disclosure transparency. Overall, Grafana Labs presents a professional, secure, and privacy-conscious digital presence aligned with its enterprise-grade observability solutions. The website effectively supports its business model and target audience, with strong trust signals and technical maturity.

P

Plastypel

polifoam-mexico.com

45

Plastypel operates the website polifoam-mexico.com as a manufacturer and wholesale supplier of polifoam and related foam packaging products in Mexico. The company targets industrial clients requiring customized foam solutions for packaging and protection across various sectors including electronics, pharmaceuticals, furniture, and e-commerce logistics. The website is professionally designed with clear navigation, multiple contact forms with captcha protection, and detailed product information in Spanish. Technical infrastructure leverages modern frontend technologies such as Bootstrap 5, jQuery, and Google Tag Manager for analytics. However, the domain WHOIS data shows inconsistencies with a future creation date and lack of registrant details, which raises some trust concerns. Security posture is moderate with HTTPS enabled and form protections, but lacks DNSSEC and security headers. Privacy and cookie policies are absent, indicating compliance gaps.

I

Nikecraft: Critical Path

isrucamp.com

53

The website 'isrucamp.com' presents a minimalistic technical front with a title 'Nikecraft: Critical Path' but lacks substantive business or contact information. The site is built using modern JavaScript frameworks including Vue.js and Ionic, and incorporates New Relic for performance monitoring. Hosting is provided by Cloudflare, but the domain WHOIS data shows inconsistencies, notably a domain creation date set in the future (2025), which raises questions about the domain's legitimacy or data accuracy. Security posture is basic with HTTPS enabled but no DNSSEC or security headers detected. Privacy and cookie policies are absent, and no contact or incident response information is provided, limiting compliance and trustworthiness. Overall, the site appears to be in early development or a placeholder with limited business presence.

T

The Invisible Dog Art Center

theinvisibledog.org

57

The Invisible Dog Art Center is a Brooklyn-based non-profit organization focused on promoting contemporary art through exhibitions, performances, culinary experiences, and artist residencies. The website serves as a hub for event information, fundraising, and community engagement, targeting art enthusiasts and supporters locally and internationally. The organization maintains an active social media presence and has received recognition such as multiple New York Emmy Awards for its fundraising video. Technically, the website is built on the Squarespace platform, leveraging modern web technologies including JavaScript, Typekit fonts, and Google Fonts. The site is mobile-optimized with good SEO practices and structured data for enhanced search engine visibility. Performance is moderate, with room for improvement in accessibility features. From a security perspective, the site enforces HTTPS but lacks some advanced security headers such as HSTS and Content Security Policy. No exposed sensitive data or vulnerabilities were detected in the content. Privacy compliance is limited due to the absence of explicit privacy and cookie policies, which is a notable gap for GDPR and other regulations. Overall, the website presents a professional and trustworthy front for the art center, though improvements in privacy compliance and security headers would enhance its posture. The lack of WHOIS data reduces domain trust slightly but does not detract significantly from the site's legitimacy given the rich content and social proof.

C

Cosmos

desarrollowebmexico.com

47

Desarrollo Web México, operated by Cosmos, is a specialized web development company focused on serving the B2B market in Mexico. With over 20 years of experience and more than 1,000 websites developed, the company offers professional web design, SEO-oriented development, and related digital marketing services. Their market position is strong within their niche, emphasizing tailored solutions for industrial and corporate clients. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, and Font Awesome, hosted on cPanel servers with domain registration through Wild West Domains, LLC. The site is mobile-optimized and SEO-friendly, though performance is moderate. Security posture is adequate but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is lacking due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy with moderate risk.

C

Cosmos

hostingydominio.com.mx

49

Cosmos operates a professional web hosting and domain registration service primarily targeting businesses and individuals in Mexico. The company emphasizes secure hosting solutions with in-house programming and offers a range of hosting plans with technical support. The website is well-structured, mobile-optimized, and uses modern web technologies including Bootstrap, jQuery, and Google Analytics. Security practices are mentioned, including SSL usage and security monitoring, but formal security policies and incident response details are not published. The absence of privacy and cookie policies represents a compliance gap. Overall, the domain registration data aligns with the business claims, indicating legitimacy and stability.

G

Galvanoquímica Mexicana

galvanoquimica.com.mx

47

Galvanoquímica Mexicana is a well-established Mexican company specializing in the distribution of chemical products primarily serving the galvanoplastia, metalmecánica, electromecánica, mining, and textile industries. With nearly four decades of continuous operation and an ISO 9001:2015 quality certification, the company positions itself as a leader in its sector, offering specialized chemical products and logistics services including hazardous materials transport. The website reflects a professional and consistent brand image targeting industrial clients in Mexico. Technically, the website employs modern web technologies such as Bootstrap 5, Font Awesome, and Google Tag Manager, ensuring a responsive and user-friendly experience. The site is moderately optimized for performance and SEO, with clear navigation and relevant content. However, it lacks explicit CMS identification and some advanced accessibility features. From a security perspective, the site uses HTTPS and secure form inputs but lacks visible security headers and does not provide privacy or cookie policies, which are critical for compliance and user trust. No incident response or vulnerability disclosure information is present. WHOIS data confirms the domain's legitimacy and consistency with the business claims. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, improved security headers, and clearer incident response mechanisms to strengthen its security posture and regulatory adherence.

I

Institute for Nonprofit News

inn.org

60

The Institute for Nonprofit News (INN) operates as a nonprofit membership network supporting over 500 nonprofit news organizations. The website serves as a platform to provide access to nonprofit news coverage on local and global issues, targeting nonprofit news organizations, journalists, and the general public interested in nonprofit news. The organization is well-established, with a domain registered since 1999, reflecting its longstanding presence in the nonprofit news sector. The website employs a WordPress CMS infrastructure with multiple plugins to support donations, events, and user management, indicating a mature digital infrastructure. Technically, the site uses modern web technologies including Google Analytics and Tag Manager for analytics, Font Awesome for icons, and Yoast SEO for search optimization. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Security-wise, the site uses HTTPS and domain registration protections but lacks DNSSEC and visible security headers, and does not publish a security policy or incident response contacts. Privacy compliance is weak, with no visible privacy or cookie policies or consent mechanisms in the provided content. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

G

Grafana Labs

grafana.net

79

Grafana Labs is a leading technology company specializing in open source analytics and monitoring solutions, primarily targeting developers, IT professionals, and enterprises seeking comprehensive observability platforms. The company offers a robust suite of products including Grafana Cloud, Loki for logs, Tempo for tracing, and Mimir for metrics, complemented by AI/ML insights and alerting capabilities. Recognized as a leader in the 2025 Gartner Magic Quadrant for Observability Platforms, Grafana Labs maintains a strong market position with a focus on innovation and customer-centric solutions. Technically, the website is built using modern technologies such as the Hugo static site generator, Alpine.js for interactivity, and Tailwind CSS for styling, hosted on AWS infrastructure. The site demonstrates excellent performance, mobile optimization, and accessibility, supported by comprehensive SEO and metadata implementations. Privacy compliance is robust, featuring detailed privacy and cookie policies with active consent mechanisms. From a security perspective, the site enforces HTTPS with strong SSL configurations and includes essential security headers. While no explicit security policies or incident response contacts are published, the domain registration data is transparent and consistent with the company's history, enhancing trustworthiness. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, Grafana Labs presents a professional, secure, and compliant digital presence aligned with its enterprise stature. Strategic recommendations include enabling DNSSEC, publishing formal security policies, and establishing a vulnerability disclosure program to further enhance security posture and stakeholder trust.

A

Adam Trnka

trnka.one

58

Adam Trnka's website serves as a personal portfolio showcasing his expertise as a technology enthusiast, product manager, consultant, creative, and cameraman. The site highlights his experience in digitalizing business needs, video production, and technology development. The business operates primarily as a small-scale service provider targeting clients who require IT consulting, product management, and creative video services. The website is professionally designed with clear contact information and a consistent brand image, though it lacks formal privacy and cookie policies. Technically, the site uses a modern tech stack including Bootstrap, jQuery, Font Awesome, and Google Fonts. It is mobile optimized and presents a good user experience. However, there is no evidence of advanced security headers or HTTPS enforcement visible in the provided data, which limits the security posture. No analytics or tracking scripts are detected, indicating minimal user tracking. From a security perspective, the absence of WHOIS data and domain registration details raises concerns about domain legitimacy and transparency. The website itself does not show signs of malicious content or vulnerabilities but lacks formal security and privacy documentation. The contact information is clearly presented, supporting business credibility. Overall, the website is a functional and professional personal portfolio with moderate technical maturity and security posture. Strategic improvements in security headers, privacy compliance, and domain registration transparency are recommended to enhance trust and compliance.

M

Modrá pomáhá, z.s.

modrapomaha.cz

42

Modrá pomáhá, z.s. is a Czech non-profit organization dedicated to supporting children with autism through a variety of services including therapies, social skills training, and recreational activities. The organization operates locally with partnerships from regional companies and foundations, positioning itself as a trusted community resource. The website reflects this mission with clear service offerings and partner acknowledgments. Technically, the site is built on WordPress using WPBakery Page Builder, with standard libraries like jQuery and Google Analytics integrated. The site is hosted by REG-ZONER, a Czech hosting provider, and uses HTTPS ensuring secure connections. However, some security best practices such as security headers and cookie consent mechanisms are missing. No direct contact emails or phone numbers are visible, suggesting reliance on contact forms for communication. Overall, the website is professional and trustworthy but could improve privacy compliance and security posture.

V

VUHŽ

vuhz.cz

46

VUHŽ is an established Czech manufacturing company specializing in equipment for continuous casting machines, single purpose machines, hot-rolled special profiles, centrifugal casts, tools manufacturing, advanced coatings, and material testing. The company targets industrial clients in the steel and metal processing sectors, offering specialized B2B manufacturing solutions. The website reflects a medium-sized enterprise with a consistent brand presence and a professional digital footprint. Technically, the site is built on Joomla CMS with a moderate tech stack including jQuery, Bootstrap, and analytics tools like Google Analytics and Matomo. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and implements cookie consent mechanisms but lacks explicit security headers and a vulnerability disclosure policy. No direct contact emails or phone numbers are visible, but multiple contact forms are available. The domain is long-standing and registered with a reputable registrar, supporting the legitimacy of the business.

N

Nadační fond Kometa

nadacnifondkometa.cz

42

Nadační fond Kometa is a Czech non-profit foundation established in 2015, focused on charitable activities including support for children with autism and community events. The foundation operates an e-shop for fundraising and maintains partnerships with local organizations such as HC Kometa Brno. The website is built on WordPress and uses common web technologies including jQuery, Google Analytics, and WPBakery Page Builder. The site is well-branded and provides relevant content for its audience, though it lacks explicit privacy and cookie policies. Security posture is moderate with HTTPS enabled but missing security headers and incident response contacts. Overall, the website is functional and trustworthy but could improve compliance and security transparency.

A

Adam Trnka

adamtrnka.com

59

Adam Trnka's website serves as a personal portfolio showcasing his expertise as a technology enthusiast, product manager, consultant, creative professional, and cameraman. The site highlights his experience in digitalizing business needs, video production, and technology development. The business model is service-oriented, targeting clients seeking IT consulting, product management, and multimedia services. The website is well-branded with consistent design and clear contact information, supporting a moderate level of business credibility. Technically, the site uses a modern frontend stack including Bootstrap, jQuery, and Google Fonts, ensuring good mobile responsiveness and user experience. However, no CMS or hosting provider information is discernible. Performance is moderate with no advanced analytics or tracking scripts detected, indicating a privacy-conscious approach but also limited marketing insights. From a security perspective, the site lacks visible security headers and privacy/cookie policies, which lowers its compliance posture. The absence of WHOIS data reduces transparency but is likely due to privacy protection, which is reasonable for a personal brand. No forms or sensitive data collection points reduce attack surface, but improvements in SSL configuration and security headers are recommended. Overall, the website is safe, professional, and suitable for general audiences. The main risks relate to privacy compliance and security best practices, which can be addressed to enhance trust and regulatory adherence.

C

Cosmos

marketing-digital-mexico.com

49

Marketing Digital México, operated by Cosmos, is a medium-sized company specializing in digital marketing services tailored for the industrial sector in Mexico. With over 60 years of experience in industrial media and 23 years in digital lead generation, the company offers a comprehensive suite of services including SEO, lead generation, campaign management, and website development. The website is professionally designed, mobile-optimized, and provides multiple contact channels including email, phone, social media, and forms with captcha protection. Technically, the site uses modern frameworks like Bootstrap and integrates Google Analytics and Tag Manager for tracking. However, there are gaps in privacy and cookie policy disclosures, and security headers are not evident, which could impact compliance and security posture. The domain registration is consistent with the business claims, enhancing trustworthiness.

The website 'Línea del Tiempo de la Industria Química en México' is an editorial and informational platform operated by Cosmos, focusing on the historical and technological evolution of the chemical industry in Mexico. It targets professionals and companies within the chemical manufacturing sector, providing detailed reports, timelines, and industry insights. The site positions itself as a leader in industry information dissemination with decades of editorial experience and a strong presence online. Technically, the website employs a modern frontend stack including Bootstrap, jQuery, and Font Awesome, ensuring responsive design and moderate performance. Google Analytics is used for user tracking, but no advanced CMS or hosting details are evident. The site lacks visible privacy and cookie policies, which impacts compliance and user trust. From a security perspective, the site uses HTTPS but lacks important security headers and visible security policies. No forms or sensitive data collection points are present, reducing attack surface, but the absence of privacy and cookie notices is a compliance gap. WHOIS data aligns well with the website's business claims, showing consistent registration information and no privacy protection, supporting legitimacy. Overall, the website is a good resource for its niche audience but requires improvements in privacy compliance, security headers, and contact transparency to enhance trust and regulatory adherence.

The Salt and Pepper Shaker Store is a specialized e-commerce retailer focused on offering a wide variety of collectible salt and pepper shakers. Established in 2011, the company targets collectors and enthusiasts with a niche product catalog exceeding 1000 styles. The website is built on the DNN CMS platform using the Cart Viper e-commerce module, providing standard online shopping features including product search, category browsing, and cart management. The business maintains a clear market position as a niche leader in its segment with a small but focused operation based in the United States. Technically, the website employs common web technologies such as jQuery and Font Awesome, with a moderate performance profile and basic mobile optimization. SEO and accessibility features are present but not advanced. Security posture is adequate with HTTPS enabled and domain registration protections, but lacks advanced security headers and DNSSEC. Privacy compliance is basic with a privacy policy and cookie consent banner, though GDPR compliance indicators are minimal. Overall, the security posture is moderate with no critical vulnerabilities detected, but improvements are recommended in DNS security and security header implementation. The website is trustworthy with consistent domain registration data and clear contact information. The business credibility is supported by professional content and a consistent brand presence. Strategic recommendations include enhancing security controls, improving privacy compliance, and expanding incident response transparency to strengthen trust and resilience.

M

Membros

membros.cz

47

Membros is a Czech Republic-based online platform launched in 2023 that enables users to discover, book, and participate in various sports activities such as yoga, gyms, and boxing. The platform offers multiple subscription plans including Basic, PAYG+, Membroship, and Corporate options, catering to a broad audience of fitness enthusiasts. The website is professionally designed with a focus on user experience, featuring a modern SPA architecture likely built with Vue.js, and integrates Stripe for secure payment processing. Social media presence and user testimonials enhance its market credibility. Technically, the site employs modern web technologies including Facebook Pixel and PostHog for analytics and tracking, Google Fonts for typography, and Font Awesome for icons. Hosting is provided by websupport.cz, a known Czech hosting provider. The site is mobile optimized and performs moderately well, though some SEO and accessibility features could be improved. Security posture is solid with HTTPS enforced and no exposed sensitive data, but lacks visible security headers and explicit incident response information. From a security and compliance perspective, the site includes privacy and terms of service pages in Czech, indicating GDPR awareness, but lacks a cookie consent mechanism and detailed security policies. No contact emails or phone numbers are directly available on the main page, which may affect user trust. The domain registration is consistent with the business launch date and shows no suspicious patterns, supporting legitimacy. Overall, Membros presents a trustworthy and functional platform for sports activity booking in the Czech market, with room for improvement in privacy compliance and security transparency to enhance user trust and regulatory adherence.

A

Analog Office

analogoffice.net

53

Analog Office is a niche personal blog dedicated to analog and hybrid analog-digital productivity and organizational methods. The site offers detailed, practical advice on paper planners, checklists, filing systems, and managing life with analog tools, targeting individuals who appreciate or want to adopt analog productivity techniques. The website is hosted on the micro.blog platform and built with the Hugo static site generator, leveraging modern web technologies such as Google Fonts, Font Awesome, and Highlight.js for code syntax highlighting. The site is well-structured, mobile-optimized, and provides a good user experience with clear navigation and rich content. Security posture is basic with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to the absence of privacy and cookie policies. No contact emails or phone numbers are publicly listed, but a contact form is available. The domain registration is consistent, legitimate, and appropriate for the business age and scope.

A

Ace Hotel Palm Springs

acehotelpalmsprings.com

61

Ace Hotel Palm Springs operates as a boutique hospitality provider offering accommodation and related services near downtown Palm Springs. The website presents a professional and visually appealing interface targeting travelers and tourists seeking stylish lodging. The technical infrastructure includes modern web technologies such as Google Tag Manager and Font Awesome, with content managed via Vizergy CMS. HTTPS is enforced, ensuring secure communications, but the absence of security headers and privacy policies indicates room for improvement in security and compliance. The lack of WHOIS registration data raises questions about domain registration transparency, although the website content and branding suggest a legitimate business presence. Overall, the site demonstrates moderate digital maturity with opportunities to enhance security posture and privacy compliance.

Y

Ye Vagabonds

yevagabonds.com

57

Ye Vagabonds is a music artist/band with an online presence focused on promoting their music, tour dates, and engaging fans via a mailing list. The website is built using modern web technologies such as Nuxt.js and includes integrations with Google Fonts and Font Awesome for styling. The domain is registered with GoDaddy since 2015, indicating a stable and consistent online presence. Security posture is moderate with HTTPS enabled and domain status protections, but lacks advanced security headers and published security policies. Privacy compliance is limited, with no privacy or terms of service pages found, though a cookie consent banner is present. Contact information is minimal, limited to a contact form without direct emails or phone numbers. Overall, the website is functional but basic in content and security maturity.

D

dwinter

dwgd.cz

47

DWGDesign is a small Czech-based graphic design and web development studio specializing in logo design, corporate identity, print layout, and UX/UI design. The company offers tailored web solutions including static sites, WordPress-based platforms, e-shops, and information portals. Their market position is that of a specialized boutique service provider targeting businesses and individuals seeking professional design and web services. Technically, the website is built on WordPress with Elementor, Yoast SEO, and Google Analytics integration, reflecting a modern and moderately optimized digital infrastructure. Security posture is adequate with HTTPS enforced and cookie consent implemented; however, there is room for improvement in security headers and incident response transparency. Overall, the website is professional, accessible, and trustworthy, with clear contact information and a consistent brand presence.

M

Mitrenga - stavby, spol. s r. o.

mitrenga.net

55

Mitrenga - stavby, spol. s r.o. is a Czech construction company specializing in bridges, transport infrastructure, and related structural works. Founded in 2005 through transformation from an earlier company established in 2001, it offers services including bridge construction, support structures, prestressing, and steel structure assembly. The company targets clients requiring specialized transport and civil engineering construction services, positioning itself as a trusted regional player with certifications and partnerships. The website is professionally designed, mobile-optimized, and provides clear contact information, enhancing business credibility. However, the absence of WHOIS registration data raises questions about domain legitimacy that should be further investigated.

The website represents a medium-sized Czech business group with two main divisions: ZOŠI TRANS, specializing in international and domestic transportation services with warehouse rental, and ZOŠI AGRO, focused on plant production in South Moravia. Additionally, Pneumatico International spol. s r.o. operates as a related tire sales and service company. The company has a long-standing market presence since 1997, supported by a domain registered in 2002, indicating stable operations. The website offers multilingual support (Czech, English, German) targeting regional and international clients. Technically, the site uses common web technologies such as jQuery, Bootstrap, Font Awesome, and integrates analytics tools like FullStory and Google Analytics via Google Tag Manager. However, it lacks a CMS and advanced frameworks, suggesting a simpler custom-built site.

Š

Švábstaf s.r.o.

svabstaf.cz

42

Švábstaf s.r.o. is a Czech Republic-based construction company specializing in earthworks and excavation services. The company emphasizes quality, reliability, and timely project delivery, targeting clients requiring comprehensive groundworks. The website presents a professional image with clear branding and client references, indicating a stable market position within its regional sector. Technically, the site is built on WordPress using modern themes and plugins, with SEO and analytics tools implemented. Security posture is adequate with HTTPS and IP anonymization in analytics, but lacks advanced security headers and formal privacy or cookie policies. WHOIS data is unavailable, which raises some concerns about domain registration transparency. Overall, the site is functional and trustworthy but would benefit from enhanced compliance and security measures.

T

The University of Oxford

structuralbiology.eu

60

Instruct-ERIC is a pan-European research infrastructure consortium focused on structural biology, providing access to advanced technologies, services, and training to researchers primarily in Europe but also globally. The organization is affiliated with The University of Oxford and operates a professional, content-rich website that supports proposal submissions, training events, and access to scientific facilities. The platform is well-positioned as a leading entity in its niche, supported by EU-funded projects and a network of partner organizations. Technically, the website employs a modern technology stack including Bootstrap, jQuery, Matomo analytics, and Google reCAPTCHA, hosted on a domain registered with Tucows and DNS managed by Hover. The site demonstrates good mobile optimization and SEO practices, though there is room for improvement in accessibility and security headers. Performance is moderate, with asynchronous loading of scripts and use of CDN-hosted libraries. From a security perspective, the site enforces HTTPS and uses domain status locks to prevent unauthorized transfers or updates. However, DNSSEC is not enabled, and security headers are not explicitly detected, which are areas for enhancement. Privacy compliance is strong with a comprehensive privacy policy and GDPR adherence, but lacks a cookie consent mechanism. No incident response or vulnerability disclosure policies are found. Overall, the website is trustworthy, professionally maintained, and serves its research community effectively. Strategic improvements in security and privacy mechanisms would further strengthen its posture and user trust.

C

Cosmos

contacto-cosmos.mx

50

Cosmos is a well-established Mexican media company specializing in B2B industrial sectors, offering a broad range of services including digital and print advertising, web development, business intelligence, and editorial content. With over 60 years of market presence, Cosmos holds a strong position in the industrial media landscape in Mexico, targeting businesses seeking industry-specific marketing and informational solutions. The website reflects a professional and consistent brand image with clear navigation and relevant content for its audience. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Font Awesome, alongside Google Analytics and Tag Manager for tracking. The site is mobile responsive and well-structured, though some accessibility features could be improved. Performance is moderate, with asynchronous loading of scripts enhancing user experience. However, no CMS or hosting provider details were detected. From a security perspective, the site uses HTTPS and includes no visible sensitive data exposure. However, it lacks explicit security headers and publicly available security or incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR compliance indicators. The site uses tracking tools that collect user data, but transparency and user control could be enhanced. Overall, Cosmos presents a credible and professional online presence with moderate technical and security maturity. Strategic improvements in security headers, privacy compliance, and accessibility would enhance trust and compliance posture, supporting its long-term business credibility.

O

OTIDEA CZ s.r.o.

e-zakazky.cz

27

E-zakazky.cz is a Czech Republic-based online platform specializing in public procurement and tender listings. Operated by OTIDEA CZ s.r.o., the site provides profiles of contracting authorities and facilitates electronic bid submissions for suppliers. The platform targets suppliers and contractors interested in government tenders, offering additional resources such as webinars. The website is well-established with a domain age of nearly 20 years, indicating a stable market presence in the government sector. Technically, the site uses modern UI frameworks like DevExtreme, integrates Google Analytics for tracking, and includes a chat AI assistant to enhance user interaction. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and cookie consent but lacks explicit security headers and incident response contacts. Privacy compliance is basic but present, with GDPR documentation linked. Overall, the site is trustworthy and professionally maintained, though improvements in security policies and accessibility could enhance its posture.

C

Coachingplus GmbH

coachingplus.ch

36

Coachingplus GmbH is a Swiss-based small business specializing in coaching education and empowerment services primarily targeting individuals seeking professional coaching training in Zurich. The website presents a professional and consistent brand image with clear business descriptions and contact information. The company leverages modern web technologies including WordPress CMS, Astra theme, Google Tag Manager, and Google Analytics 4, indicating a mature digital infrastructure. The site is mobile-optimized and includes comprehensive privacy and cookie policies with a consent mechanism, reflecting good privacy compliance. Security posture is strong with HTTPS enforcement and security headers, though no explicit security policy or incident response information is published. Overall, the website is trustworthy and well-maintained, suitable for its niche educational market.

K

Klinika Cellthera

cellthera.org

45

Klinika Cellthera is a specialized healthcare provider focused on regenerative medicine and anti-aging treatments based in Brno, Czech Republic. The clinic offers a broad range of advanced medical services including immunology, oncology supportive care, orthopedics, stem cell therapies, and innovative diagnostic and therapeutic procedures. Their market position is that of a niche provider with over 25 years of experience in the field, targeting patients seeking alternative and comprehensive healing approaches. The website is professionally designed, content-rich, and compliant with GDPR regulations, reflecting a mature digital presence.

R

Ranxplorer

kifdom.com

52

KifDom is a French niche marketplace specializing in the acquisition and resale of expired .fr domain names, targeting SEO professionals and domain investors. The website is professionally designed, mobile-optimized, and provides clear navigation with comprehensive domain listings, auctions, and immediate purchase options. The business is operated by Ranxplorer, a company accredited by AFNIC since 2014, indicating a stable market presence. Technically, the site uses modern frontend technologies including Bootstrap, Tailwind CSS, and Google Tag Manager, with HTTPS enforced for secure communications. Security measures include CSRF protection and session management, though some standard security headers are not explicitly detected. Privacy compliance is addressed with a cookie consent mechanism and a privacy policy in French, consistent with GDPR requirements. Contact is primarily via a web form, with no direct emails or phone numbers publicly listed. WHOIS data for the domain is unavailable or shows no match, which raises minor concerns about domain registration transparency but does not detract significantly from the site's legitimacy. Overall, KifDom presents a trustworthy and functional platform for expired domain transactions in the French market.

G

Greentology

greentology.life

41

Greentology is a Spanish-language media outlet dedicated to publishing high-quality content focused on sustainability, green business, and environmental topics. The website serves a niche audience interested in green innovation, NGOs, foundations, and lifestyle aspects related to sustainability. The business model centers on content publishing and opinion dissemination, positioning itself as a specialized media platform in the sustainability sector. The site is professionally designed, with consistent branding and a clear navigation structure, supported by a WordPress CMS infrastructure enhanced with popular plugins such as Yoast SEO and Elementor.

T

The American Society Of Mexico AC

amsoc.mx

53

The American Society Of Mexico AC (AmSoc) is a well-established non-profit organization with over 80 years of history, dedicated to uniting the American community in Mexico with businesses, civil organizations, and communities to foster prosperity and social development. The organization operates through strategic business linkages, social inclusivity, community participation, and integration initiatives, supported by a network of prominent corporate sponsors and partners. Their website reflects a professional and consistent brand image, targeting American companies and communities in Mexico. Technically, the website is built on WordPress using popular plugins like WPBakery Page Builder and Slider Revolution, with Google Analytics and Tag Manager integrated for tracking. The site is mobile optimized and performs moderately well, though accessibility and SEO could be improved. Security posture is good with HTTPS enforced, but lacks some advanced security headers and explicit cookie consent mechanisms. From a security perspective, no critical vulnerabilities or exposed sensitive data were detected. However, the absence of a cookie consent banner and security policy pages indicates room for compliance improvement. The WHOIS data aligns well with the website's claims, showing consistent registration information and domain age appropriate for the organization's history. Overall, the site is trustworthy and professional, with recommendations to enhance privacy compliance, security headers, and incident response transparency to further strengthen its security and compliance posture.

The Cámara de Comercio del Canadá en México, A.C. is a well-established non-profit organization founded in 1982 that serves as the voice of Canadian businesses in Mexico. The website reflects a professional business chamber focused on promoting trade, investment, and networking between Canada and Mexico. It targets Canadian and Mexican business communities and offers services such as events, committees, and corporate partnerships. The site is built on the concrete5 CMS platform and uses common web technologies like jQuery, Bootstrap, and Font Awesome. Hosting is likely provided by GoDaddy, consistent with WHOIS data. Security posture is moderate with HTTPS enabled but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is professional, trustworthy, and content-rich, but could improve in privacy and security best practices.

H

HTD

htd.com.mx

49

HTD is a Mexican company specializing in energy measurement technologies and services aimed at industrial and manufacturing sectors. Their offerings include energy consumption monitoring, air compressed system audits, and installation of energy-efficient components, positioning them as a key player in promoting energy efficiency and cost reduction in industrial processes. The website reflects a professional and consistent brand image with clear business focus and partnerships with recognized technology providers. Technically, the site is built on WordPress with Elementor, using modern web technologies and providing a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and secure forms, but lacks advanced security headers and formal security policies. Privacy compliance is minimal with no visible privacy or cookie policies. Overall, the site is trustworthy and well-structured for its business purpose.

D

Dojomania

dojomania.com

58

Dojomania is a French-based e-commerce retailer specializing in combat sports equipment such as judo, karate, taekwondo, boxing, and MMA gear. The website offers a wide range of products including kimonos, belts, gloves, bags, and personalized embroidery services. It targets martial arts practitioners and clubs, positioning itself as a specialist retailer with a professional online presence. The site is built on the PrestaShop platform, leveraging modern web technologies and providing multilingual support. Security posture is good with HTTPS and security headers implemented, though there is no visible security policy or incident response information. Privacy and cookie policies are present and GDPR compliant. The absence of WHOIS data is a concern for domain legitimacy but the website content and contact information suggest a legitimate business. Overall, the site is well designed, functional, and trustworthy for its target audience.

C

Cofidis GROUP

cofidis-group.com

58

Cofidis Group is a large European financial services company operating in 9 countries with a focus on credit, insurance, digital banking, and payment solutions. The group is majority-owned by Crédit Mutuel Alliance Fédérale, reinforcing its market position and financial stability. The website presents a professional and comprehensive digital presence, showcasing subsidiaries, corporate values, and CSR initiatives. Technically, the site is built on WordPress with Elementor and uses modern web technologies, providing good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit security policies are not visible. The absence of WHOIS registration data is a concern but may be due to privacy protection or proxy registration. Overall, the website is trustworthy and well-maintained, serving a general audience with no adult or NSFW content.

N

Nemocnice Vyškov, příspěvková organizace

nemvy.cz

61

Nemocnice Vyškov, příspěvková organizace, is a regional healthcare provider in the Czech Republic offering a wide range of medical services including inpatient and outpatient care, oncology, laboratories, radiodiagnostics, emergency services, and pharmacy. The website targets patients and the general public, providing comprehensive information about departments, patient services, and public information. The organization positions itself as a trusted regional healthcare institution with certifications such as Baby Friendly and others, enhancing its credibility. Technically, the website employs modern web technologies including Google Web Fonts and Font Awesome icons, with a responsive design optimized for mobile devices and accessibility. The site uses HTTPS with a good SSL configuration, though the Content-Security-Policy header is empty and could be improved. The site includes cookie consent mechanisms and privacy policies compliant with GDPR, reflecting a mature approach to privacy and user consent. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security policies or incident response contact information and does not publish a security.txt file, which could enhance transparency and security posture. The absence of WHOIS data reduces trust in domain legitimacy, but the website content and structure suggest a legitimate public healthcare entity. Overall, the website is professional, well-structured, and trustworthy, with room for improvement in security header implementation and domain registration transparency. The risk level is moderate, primarily due to missing WHOIS data and minor security header gaps.

P

Play Fortune For Fun

playfortuneforfun.com

66

Play Fortune For Fun is a specialized online casino review and rating platform targeting adult gambling enthusiasts. The website offers curated casino reviews, bonus offers, and game guides to help users find the best online casinos. It positions itself as a trusted source with expert content authored by Victor Bagan, an experienced online gambling expert. The platform operates on WordPress CMS with a Laravel Nova backend, leveraging modern web technologies and SEO best practices. While the site is well-structured and mobile-optimized, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Security posture is moderate with HTTPS enabled but missing DNSSEC and security headers. The domain is newly registered in 2024, which is inconsistent with the website's claimed content history dating back to 2020, suggesting a recent domain acquisition or rebranding. Overall, the site is professional and trustworthy but should improve compliance and security practices.

G

Google

flutter.dev

70

Flutter.dev is the official website for Flutter, an open source multi-platform app development framework maintained by Google LLC. The site targets developers and software engineers, offering comprehensive resources to build, test, and deploy applications across mobile, web, desktop, and embedded platforms from a single codebase. The website reflects Google's strong market position in developer tools and frameworks, supported by a large global community and integration with Google's ecosystem services such as Firebase and Google Ads. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, Alpine.js, and integrates Google services like Google Analytics and Tag Manager for analytics and tracking. The site is hosted on Google Cloud infrastructure, ensuring fast performance and excellent mobile optimization. Security best practices are observed with HTTPS enforcement and use of Google reCAPTCHA on forms, although explicit security headers are not visible in the HTML content. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is robust, linking to Google's comprehensive privacy and cookie policies, and providing a cookie consent mechanism. However, the site lacks explicit incident response contact details and a public vulnerability disclosure page. Overall, the website is highly trustworthy, professional, and secure, reflecting Google's standards. Strategically, Flutter.dev serves as a critical platform for Google to engage the developer community, promote its cross-platform framework, and integrate with its broader cloud and advertising ecosystem. The site’s design, content quality, and technical implementation support a high level of user trust and engagement.

K

Klub svobodných matek z.s

klubsvobodnychmatek.cz

38

Klub svobodných matek z.s is a Czech non-profit organization dedicated to supporting single-parent families across the Czech Republic. The organization provides financial, material, legal, and informational assistance to help single parents and their children manage daily challenges. Their services include aid for food, housing costs, school supplies, summer camps, and clothing through their Oděvní banka program. They also offer a free helpline and legal online advice. The website reflects a well-established entity with a clear mission and consistent branding, supported by testimonials and active social media channels. Technically, the website is built on WordPress using the Astra theme and Elementor page builder, incorporating modern web technologies such as jQuery and Swiper.js. The site is mobile-optimized and performs moderately well, though there is room for improvement in SEO and accessibility. The hosting and domain registration are consistent with a Czech-based non-profit organization, with no suspicious indicators. From a security perspective, the site uses HTTPS but lacks visible security headers and formal security policies such as incident response or vulnerability disclosure. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms, which is a notable compliance gap. Tracking is implemented via Leadhub pixels, indicating moderate user tracking. Overall, the website is professional and trustworthy for its intended audience but should enhance privacy compliance and security best practices to improve its security posture and regulatory adherence.

C

Cofidis Magyarország

cofidis.hu

58

Cofidis Magyarország operates as a prominent financial services provider specializing in personal loans, debt consolidation, retail financing, and vehicle leasing within Hungary. The website offers a comprehensive suite of loan products with detailed terms, representative examples, and an online application process, targeting Hungarian consumers seeking flexible and accessible financial solutions. The company maintains a strong market position with consistent branding and a professional online presence. Technically, the website leverages modern frameworks such as Bootstrap and integrates analytics tools like Google Analytics and Hotjar, ensuring a responsive and user-friendly experience across devices. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the site demonstrates good compliance with privacy regulations and provides clear contact channels, primarily via a prominently displayed phone number. The domain registration data aligns well with the business claims, supporting the legitimacy of the entity.

T

TJ LOKOMOTIVA TRUTNOV, z.s.

lokotrutnov.cz

9

TJ Lokomotiva Trutnov is a well-established Czech non-profit sports association founded in 2001, offering a wide range of sports sections and community events primarily in Trutnov. The website serves as an information hub for sports activities, events, and organizational details targeting local sports enthusiasts, children, and seniors. The organization maintains a consistent brand presence and provides clear contact information, supporting its credibility and community engagement. Technically, the site is built on Joomla CMS with Bootstrap and T3 framework, ensuring responsive design and moderate performance. Integration with Google Analytics and Facebook SDK indicates moderate user tracking and marketing efforts. Security posture is moderate with some best practices like CSRF tokens but lacks visible security headers and cookie consent mechanisms. Privacy policy is present but basic and lacks explicit GDPR compliance indicators. WHOIS data confirms domain legitimacy and long-term operation consistent with the organization's history.

SysCom, operated by Aglo Solutions s.r.o., is a Slovak technology company specializing in a proprietary content management system and application framework designed for rapid development of websites, intranet solutions, and online shops. The company targets businesses and developers seeking efficient web and application development platforms, boasting over 10 years of experience and a portfolio including government and corporate clients. The website presents a professional and consistent brand image with clear contact information and client references, positioning SysCom as a credible player in the regional technology sector. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Font Awesome, and various UI plugins, running on the SysCom CMS platform. The site is mobile-optimized with good navigation and design quality, though performance is moderate. Google Analytics is used for visitor tracking, but no visible cookie consent or privacy policies are present, indicating room for improvement in privacy compliance. From a security perspective, the site uses HTTPS (assumed but not explicitly confirmed), but lacks visible security headers and formal security policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data aligns well with the business claims, showing consistent registration details and no privacy protection, supporting legitimacy. Overall, the website is functional, professional, and trustworthy but would benefit from enhanced privacy compliance, security header implementation, and formal policies to improve its security posture and regulatory adherence.

E

EUROMOTOR

euromotor.sk

61

EUROMOTOR is an authorized vehicle sales and service company based in Banská Bystrica, Slovakia. The company offers comprehensive services including vehicle sales, financing, insurance, and servicing, targeting general consumers in the local transportation sector. The website is professionally designed using WordPress CMS with modern plugins and tracking tools, indicating a moderate level of digital maturity. The presence of cookie consent via Cookiebot demonstrates some privacy awareness, although explicit privacy and terms of service policies are missing. Security posture is adequate with HTTPS and some best practices, but lacks detailed security policies and vulnerability disclosures. Overall, the website is trustworthy and functional but could improve compliance and security transparency.

V

Vědavýzkum.cz

vedavyzkum.cz

58

Vědavýzkum.cz is a well-established Czech online portal dedicated to providing independent and comprehensive information about science and research. The platform serves a diverse audience including researchers, academics, students, and the general public interested in scientific developments. It offers a wide range of content such as news articles, interviews, analyses, opinions, grant information, event calendars, podcasts, and job listings, positioning itself as a key information hub in the Czech scientific community. The portal maintains strong partnerships with reputable Czech scientific institutions, enhancing its credibility and reach. Technically, the website is built on the Joomla CMS platform, utilizing modern frontend technologies such as jQuery, Awesomplete, Owl Carousel, and the Gantry 5 framework. It employs Google Analytics for traffic analysis and implements GDPR-compliant cookie consent mechanisms. The site is hosted by REG-ZONER, a Czech hosting provider, and uses HTTPS with good SSL configuration, ensuring secure communications. The design is professional, mobile-optimized, and offers good navigation and SEO practices. From a security perspective, the portal demonstrates good practices including HTTPS enforcement and cookie consent management. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not detected and could be improved. No vulnerabilities or exposed sensitive data were found in the analyzed content. The absence of a dedicated security policy or incident response contact suggests room for enhancement in security transparency. Overall, Vědavýzkum.cz presents a trustworthy, professional, and content-rich platform with a solid technical foundation and compliance with privacy regulations. Strategic improvements in security headers and incident response disclosures would further strengthen its security posture and user trust.

I

Institute of Molecular and Translational Medicine

imtm.cz

61

The Institute of Molecular and Translational Medicine (IMTM) is a well-established biomedical research institute based in the Czech Republic, founded in 2010. It focuses on understanding infectious diseases and cancer, developing medicines, diagnostics, and medical devices. The institute operates with a strong emphasis on public-private partnerships and international research collaborations. The website reflects a mature digital presence with comprehensive scientific content, including featured publications, research projects, and educational resources targeting researchers, students, and healthcare professionals. Technically, the website is built on Drupal 10 with modern front-end frameworks like Bootstrap and Font Awesome, ensuring good mobile optimization and accessibility. It integrates Google Analytics and Tag Manager for user tracking with anonymized IPs and provides a GDPR-compliant cookie consent mechanism. The hosting and domain registration are consistent with the organization's location and business nature. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent for privacy compliance. However, explicit security headers and a published security policy or incident response contacts are missing, representing areas for improvement. No vulnerabilities or suspicious content were detected. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance with basic privacy standards.